Skillenai

threat intelligence jobs in 2026 — demand, top roles hiring, and related skills

As of 2026-09-30, threat intelligence appears in 825 job postings indexed by Skillenai over the past 90 days — Security Engineer has the most postings mentioning threat intelligence, with demand share up 25.6% vs the prior 4 weeks.

Last updated · 90d ending 2026-09-30

Postings · last 90 days
825
Demand vs prior month
up 25.6% vs the prior 4 weeks
Top role · 16.6% of skill postings
Security Engineer
Top hiring metro
New York City

Which roles want threat intelligence?

Upload your resume and Skillenai will show which roles your threat intelligence experience fits, which skills you already cover, and what is missing.

See which roles your threat intelligence experience fits →No account needed.

Prepare to discuss threat intelligence in your interview

We’re building mock interviews informed by job postings and career profiles, to help you explain how you’ve used threat intelligence.

Join the mock interview waitlist →AI or human interviews. Coming soon.

Frequently asked questions about threat intelligence

+Is threat intelligence in demand in 2026?

Yes. threat intelligence appears in 825 job postings indexed by Skillenai over the 90 days ending 2026-09-30. Security Engineer accounts for the most postings mentioning threat intelligence (16.6% of all postings mentioning threat intelligence).

+What jobs require threat intelligence?

According to the Skillenai jobs index over the 90 days ending 2026-09-30, among roles with at least 20 postings, the highest shares mentioning threat intelligence are Safeguards Enforcement Analyst (48.1% of that role’s postings mention threat intelligence), SOC Analyst (34.6% of that role’s postings mention threat intelligence), Security Operations Analyst (28.6% of that role’s postings mention threat intelligence).

+What skills are commonly paired with threat intelligence?

Across job postings indexed by Skillenai (90 days ending 2026-09-30), threat intelligence most often appears alongside incident response, SIEM, Threat hunting, Python, vulnerability management.

+Where is threat intelligence most in demand?

As of 2026-09-30, the metro areas posting the most jobs requiring threat intelligence are New York City, Dublin, Tel Aviv, Bengaluru, Boston, according to the Skillenai jobs index.

+How can I keep up with new threat intelligence content and jobs?

Skillenai indexes news, blog posts, and research papers mentioning threat intelligence alongside the jobs index. You can subscribe to a daily email digest of new threat intelligence content from your Skillenai account.

+Which skills come before and after threat intelligence?

The skill-flow chart shows skills documented in adjacent positions across observed employer changes. An outgoing skill is documented in the following position but not the preceding one. These are ideas to explore, not proven prerequisites, acquisition dates, or levels of mastery. Each ribbon counts employer moves with that skill pair; one move can contribute several pairs.

Weekly indexed postings requiring threat intelligence — last 90 days

Salary distribution

Box = 25th–75th percentile · tick = median · whisker = 10th–90th · USD, annualized

Career paths around threat intelligence

Skills documented before and after this skill across employer changes.

Historical career profiles · all locations

Skills before threat intelligence

Before threat intelligenceVulnerability Management → threat intelligence: 3 observed employer moves with this skill pairSIEM → threat intelligence: 3 observed employer moves with this skill pairincident response → threat intelligence: 3 observed employer moves with this skill pairSOC 2 → threat intelligence: 2 observed employer moves with this skill pairVulnerability assessments → threat intelligence: 2 observed employer moves with this skill pairNIST → threat intelligence: 2 observed employer moves with this skill pairmalware → threat intelligence: 2 observed employer moves with this skill pairISO 27001 → threat intelligence: 2 observed employer moves with this skill pairthreatintelligenceVulnerability Management: 3 movesVulnerabilityManagement3 movesSIEM: 3 movesSIEM3 movesincident response: 3 movesincident response3 movesSOC 2: 2 movesSOC 22 movesVulnerability assessments: 2 movesVulnerabilityassessments2 movesNIST: 2 movesNIST2 movesmalware: 2 movesmalware2 movesISO 27001: 2 movesISO 270012 moves

Skills after threat intelligence

After threat intelligencethreat intelligence → reports: 2 observed employer moves with this skill pairthreat intelligence → Logstash: 2 observed employer moves with this skill pairthreat intelligence → cyber risk management: 2 observed employer moves with this skill pairthreat intelligence → User Access Reviews (UAR): 1 observed employer moves with this skill pairthreat intelligence → single cell RNA-seq (scRNA-seq): 1 observed employer moves with this skill pairthreat intelligence → password policy: 1 observed employer moves with this skill pairthreat intelligence → multi-sample integration methods: 1 observed employer moves with this skill pairthreat intelligence → Strelka: 1 observed employer moves with this skill pairthreatintelligencereports: 2 movesreports2 movesLogstash: 2 movesLogstash2 movescyber risk management: 2 movescyber riskmanagement2 movesUser Access Reviews (UAR): 1 movesUser AccessReviews (UAR)1 movessingle cell RNA-seq (scRNA-seq): 1 movessingle cellRNA-seq(scRNA-seq)1 movespassword policy: 1 movespassword policy1 movesmulti-sample integration methods: 1 movesmulti-sampleintegrationmethods1 movesStrelka: 1 movesStrelka1 moves
How to read this chart · view counts

Each side is an independent set of observed employer moves, not the same people followed through three stages. Ribbon widths compare move counts within that side. Internal moves are not included.

The following position documents a skill that the preceding position does not. Skills must be linked to both positions, with clear dates and no overlap. One move can connect several skill pairs. These patterns suggest skills to explore; they do not establish prerequisites, when a skill was learned, or a higher skill level.

Source: Skillenai talent graph, historical career profiles. Historical descriptions and coverage can change. Only the leading published connections are shown.

Observed connections and move counts
ConnectionMoves
Before: Vulnerability Management3
Before: SIEM3
Before: incident response3
Before: SOC 22
Before: Vulnerability assessments2
Before: NIST2
Before: malware2
Before: ISO 270012
After: reports2
After: Logstash2
After: cyber risk management2
After: User Access Reviews (UAR)1
After: single cell RNA-seq (scRNA-seq)1
After: password policy1
After: multi-sample integration methods1
After: Strelka1

Roles most likely to require threat intelligence

Among roles with at least 20 postings in the same period.

RolePostings mentioning skill% of role postings mentioning skill
Safeguards Enforcement Analyst1348.1%
SOC Analyst934.6%
Security Operations Analyst628.6%
Cybersecurity Advisor622.2%
Chief Information Security Officer (CISO)620.7%
Vulnerability Management Engineer415.4%
Detection Engineer414.3%
Security Analyst4411.5%
Security Operations Engineer711.1%
Cybersecurity Director311.1%

Roles with the most threat intelligence postings

RolePostings mentioning skillShare of skill postings
Security Engineer13716.6%
Security Analyst445.3%
Product Manager253.0%
Cybersecurity Analyst242.9%
Cyber Security Analyst172.1%
Cybersecurity Engineer161.9%
Software Engineer151.8%
Safeguards Enforcement Analyst131.6%
Information Security Engineer121.5%
Engineering Manager111.3%

Top companies posting jobs requiring threat intelligence

Employers ranked by indexed job postings in the last 90 days.

Top companies posting jobs requiring threat intelligence
CompanyPostings · 90 days
Stripe35
Anthropic29
CrowdStrike20
Gitlab11
BeyondTrust7
Ensigninfosecurity6
Anduril Industries6
Anduril5
OpenAI5
Mastercard5

Job postings indexed over the past 90 days, grouped by resolved employer. Counts are postings, not hires. Companies without a published page appear without a link.

Top metros hiring for threat intelligence

NamePostingsShare
New York City344.1%
Dublin242.9%
Tel Aviv212.5%
Bengaluru182.2%
Boston172.1%
San Francisco151.8%
Seattle151.8%
Austin141.7%
London101.2%

Skills commonly paired with threat intelligence

incident response (412)SIEM (312)Threat hunting (284)Python (275)vulnerability management (193)EDR (178)MITRE ATT&CK (147)Detection engineering (143)SOAR (142)AWS (119)

Get a daily email digest of new threat intelligence content

Skillenai indexes news articles, blog posts, and research papers that mention threat intelligence. Click below and we'll open a pre-filled daily digest — change the cadence to hourly or weekly if you prefer, then save. Free account required (~30 seconds).

Get the threat intelligence content digest →Browse all skills →

Explore related pages

How this was computed

Counts derive from the Skillenai jobs index over the 90 days ending 2026-09-30. Skills are resolved against the Skillenai canonical taxonomy, so the same entity is counted whether a posting writes 'Python', 'Python 3', or 'python'. Role prevalence divides postings mentioning threat intelligence by all postings for each role in the same window, ranking roles with at least 20 postings. Role distribution divides each role’s threat intelligence postings by all threat intelligence postings, including postings without a role. Shares need not sum to 100% for the displayed roles. Pages refresh weekly (or daily for the top-50 most-requested skills). Adjusted posting share: 0.3% to 0.4%. Demand share change is the relative percentage change between these adjusted shares. Each employer-and-ATS group has at least 10 postings in each 90-day window; its earlier posting count supplies the same weight in both windows. The panel includes 2,596 identified employers and covers 68% of earlier and 72% of latest indexed postings. Windows: 2026-06-02 to 2026-08-31 and 2026-06-30 to 2026-09-28 (UTC; end dates excluded). The windows overlap by 62 days. Dates reflect indexing, not the employer’s posting date. This measures posting mix, not total hiring or market-wide demand. Matching excludes entrants and exits; changes in crawl completeness within an employer or ATS can still affect the result.

source
Skillenai jobs index, deduplicated daily
entity_id
cd85e5c369839dca
data_as_of
2026-09-30
window_days
90
Hiring engineers who use threat intelligence?

The demand, skills, and geo numbers on this page come from the same Skillenai labor market index that powers our API. Use it for compensation benchmarking, hiring-competition analysis, and skill-adoption tracking.

Skillenai for recruiters →
Compiled by Jared Rand · Data sourced from the Skillenai labor market index